It’s a pretty common problem in Windows. You need just to set cacert.pem to curl.cainfo. Since PHP 5.3.7 you could do: download https://curl.se/ca/cacert.pem and save it somewhere. update php.ini — add curl.cainfo = “PATH_TO/cacert.pem” Otherwise you will need to do the following for every cURL resource: curl_setopt ($ch, CURLOPT_CAINFO, “PATH_TO/cacert.pem”);
Your keys may already be in PEM format, but just named with .crt or .key. If the file’s content begins with —–BEGIN and you can read it in a text editor: The file uses base64, which is readable in ASCII, not binary format. The certificate is already in PEM format. Just change the extension to … Read more
Execute following commands: brew update brew install openssl echo ‘export PATH=”/usr/local/opt/openssl/bin:$PATH”‘ >> ~/.bash_profile source ~/.bash_profile You will have the latest version of openssl installed and accessible from cli (command line/terminal). Since the third command will add export path to .bash_profile, the newly installed version of openssl will be accessible across system restarts.
Relating to ‘SSL certificate problem: unable to get local issuer certificate’ error. It is important to note that this applies to the system sending the CURL request, and NOT the server receiving the request. Download the latest cacert.pem from https://curl.se/ca/cacert.pem Add the ‘–cacert /path/to/cacert.pem’ option to the curl command to tell curl where the local … Read more
This is what worked for me: brew update brew install openssl ln -s /usr/local/opt/openssl/lib/libcrypto.1.0.0.dylib /usr/local/lib/ ln -s /usr/local/opt/openssl/lib/libssl.1.0.0.dylib /usr/local/lib/ ln -s /usr/local/Cellar/openssl/1.0.2j/bin/openssl /usr/local/bin/openssl Thanks to @dorlandode on this thread https://github.com/Homebrew/brew/pull/597 NB: I only used this as a temporary fix until I could spend time correctly installing Openssl again from scratch. As I remember I spent … Read more
1. Using the x509 module openssl x509 … … 2 Using the ca module openssl ca … … You are missing the prelude to those commands. This is a two-step process. First you set up your CA, and then you sign an end entity certificate (a.k.a server or user). Both of the two commands elide … Read more
You can do that in one command: openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -sha256 -days 365 You can also add -nodes (short for no DES) if you don’t want to protect your private key with a passphrase. Otherwise it will prompt you for “at least a 4 character” password. The days parameter … Read more